1. Smart Card Security: Power Analysis Attacks
Greg Kish
Rob Rex
Jamie Walls

2. Overview Introduction Background Power Analysis Conclusion
What is a Smart Card
Evolution
Attacks
Power Analysis
Conclusion

3. Background What is a ‘smart card’? Applications
vs. dumb cards
Why smart cards?
Applications
Physical Characteristics
At a glance
ISO :1988

4. Evolution Embossed numbers and cardholder’s name Signature field
Magnetic stripe
Hologram
Internet fraud
Smart card

5. Attacks Invasive Non-Invasive Physically breaking the card Glitching
Malicious applets
Power analysis

6. Simple Power Analysis Gathering the data Breaking DES How?
What does it mean?
Hamming weight leakage
Transition count
Breaking DES

8. Simple Power Analysis Gathering the data Breaking DES How?
What does it mean?
Hamming weight leakage
Transition count
Breaking DES

9. Differential Power Analysis
Why not keep it simple?
How its done
Attack in pieces
Only 26 choices per Sbox

11. Noise Noise 4 types of noise External Intrinsic Quantizational
Algorithmic

12. Defenses Ineffective Promising advances Add Noise
Change execution order
Promising advances
Random calculations
Hardware research

13. Conclusion This is important! Power Analysis
Smart cards are convenient & powerful
Limited by their safety
Power Analysis
Information can only be hidden